NetBSD sites use extensive soft links and if you look at the site with an ftp client, the links will be evident. In your case stable -> pkgsrc-2016Q3 and if you look at that directory"
Code:
ftp> pwd
257 "/pub/pkgsrc/pkgsrc-2016Q3" is the current directory.
ftp> ls
150 Opening ASCII mode data connection for '/bin/ls'.
total 543860
drwxrwxr-x 52 600 netbsd 2048 Nov 26 02:34 pkgsrc
-rw-r--r-- 1 600 netbsd 42932880 Sep 30 18:55 pkgsrc-2016Q3.tar.bz2
-rw-r--r-- 1 600 netbsd 63 Sep 30 18:55 pkgsrc-2016Q3.tar.bz2.MD5
-rw-r--r-- 1 600 netbsd 72 Sep 30 18:55 pkgsrc-2016Q3.tar.bz2.SHA1
-rw-r--r-- 1 600 netbsd 58114496 Sep 30 18:55 pkgsrc-2016Q3.tar.gz
-rw-r--r-- 1 600 netbsd 62 Sep 30 18:55 pkgsrc-2016Q3.tar.gz.MD5
-rw-r--r-- 1 600 netbsd 71 Sep 30 18:55 pkgsrc-2016Q3.tar.gz.SHA1
-rw-r--r-- 1 600 netbsd 38088932 Sep 30 18:55 pkgsrc-2016Q3.tar.xz
-rw-r--r-- 1 600 netbsd 62 Sep 30 18:55 pkgsrc-2016Q3.tar.xz.MD5
-rw-r--r-- 1 600 netbsd 71 Sep 30 18:55 pkgsrc-2016Q3.tar.xz.SHA1
-rw-rw-r-- 1 600 netbsd 43522951 Nov 26 02:36 pkgsrc.tar.bz2
-rw-r--r-- 1 600 netbsd 56 Nov 26 02:36 pkgsrc.tar.bz2.MD5
-rw-r--r-- 1 600 netbsd 65 Nov 26 02:36 pkgsrc.tar.bz2.SHA1
-rw-rw-r-- 1 600 netbsd 57897952 Nov 26 02:35 pkgsrc.tar.gz
-rw-r--r-- 1 600 netbsd 55 Nov 26 02:35 pkgsrc.tar.gz.MD5
-rw-r--r-- 1 600 netbsd 64 Nov 26 02:35 pkgsrc.tar.gz.SHA1
-rw-rw-r-- 1 600 netbsd 37530916 Nov 26 02:40 pkgsrc.tar.xz
I would actually download the latest versions, November 26, in hopes of getting any updates/bug fixes. The MD5 and SHA1 files are used to validate the files integrity. It is useful when starting out to learn how to obtain an md5sum and sha1 hash.
Pkgsrc is used for you to build your own packages and is
NOT needed with pkgin. pkgin installs already built packages. The xfce4 desktop I just installed was almost entirely built with pkgin. The only package I had to build was mplayer.